Aerospace GRC Director: Strategy, Audits & Compliance

Telemetry Today LLC; Los Angeles (CA); On-site; USD 180,000 - 260,000; Full time

Benefits offered by this job

Equity in Apex

World-class healthcare

PTO 15–20 days + holidays

401(k) match

Parental leave

Daily catered lunch

Job summary

Apex Technology, Inc. is seeking a Director of Governance, Risk & Compliance to own and scale our GRC program across government, defense, and commercial security frameworks.

You will lead a team including an ISSO and ISSM, coordinating with legal, engineering, IT, and program teams to maintain audit-ready posture. You will drive continuous improvement of control frameworks, manage audits, and ensure regulatory alignment across ITAR/EAR, GDPR/CCPA, and privacy requirements.

Qualifications

• 8+ years in governance, risk, and compliance, information security, or a closely related field.
• Experience owning a GRC or security compliance program.
• Hands-on knowledge of NIST SP 800-171 and the NIST CSF, with practical CMMC/FedRAMP experience.
• Ownership of commercial security certifications — SOC 2 and ISO 27001.
• Familiarity with export controls ITAR/EAR and data privacy (GDPR, CCPA).
• Proven ability to manage audits and assessments end to end and to build evidence and documentation for external scrutiny.
• Strong cross-functional communication skills between regulators, auditors, engineers, and executives.

Responsibilities

• Own Apex's GRC program end to end and maintain control frameworks, policies, standards, and procedures.
• Lead, mentor, and manage the GRC team and direct reports (ISSO/ISSM).
• Drive compliance against NIST 800-171, CMMC, and FedRAMP; develop SSP and POA&M; ensure continuous monitoring and audit readiness.
• Oversee commercial security certifications (SOC 2 Type II, ISO 27001) from scoping to renewal.
• Partner with Legal, Trade Compliance, and Privacy on ITAR/EAR and GDPR/CCPA obligations.
• Manage enterprise risk management: maintain risk register, assessments, remediation, and reporting to leadership.
• Administer internal, customer, and third-party audit lifecycle; provide evidence and narratives for audits.
• Consolidate overlapping requirements into a single, coherent control framework.
• Run vendor and third-party risk programs and monitor supplier compliance.
• Deliver decision-ready compliance status reports to Director of Cybersecurity and executives.

Skills

GRC ownership

NIST SP 800-171

CMMC

FedRAMP

SOC 2

ISO 27001

ITAR/EAR

GDPR/CCPA

Audit management

Leadership

Education

Master's degree in public policy or related

Job description

Apex Technology, Inc. is seeking a Director of Governance, Risk & Compliance to own and scale our GRC program across government, defense, and commercial security frameworks.

You will lead a team including an ISSO and ISSM, coordinating with legal, engineering, IT, and program teams to maintain audit-ready posture. You will drive continuous improvement of control frameworks, manage audits, and ensure regulatory alignment across ITAR/EAR, GDPR/CCPA, and privacy requirements.